This privacy policy describes how ShokuLight ("the App", "we", "our") collects, uses, and protects your information when you use our mobile application.
1. Information We Collect
1.1 Account Information
When you create an account, we collect your email address and a hashed password.
We never see your plain-text password. You may optionally provide a display name,
height, weight, age, and cuisine preferences to personalize your experience.
1.2 Food Photos
When you use the AI scan feature, the photo you take or select is temporarily transmitted
to our server for food recognition. Photos are processed in memory and not stored on disk.
The AI model (Zhipu GLM-4V-Flash) receives the image solely for nutrition estimation and
does not use it for training.
1.3 Food Log Data
We store the results of food recognition: identified food names, estimated calories,
protein, carbohydrates, fat, and fiber values. This data is tied to your account.
1.4 Automatically Collected Information
We do not collect:
Device IDs, advertising IDs, precise location, contacts, browsing history,
or any information from other apps on your device.
2. How We Use Your Information
To identify foods in photos and estimate nutrition values
To save and display your daily food diary and weekly summaries
To track your streak and provide motivation
To authenticate your account (email + password)
To communicate with you (support responses only)
3. Data Sharing
We do not sell, trade, or share your personal information with third parties, except:
AI Service Provider: Food photos are sent to Zhipu AI (open.bigmodel.cn)
for nutrition analysis. Photos are processed and immediately discarded.
Legal Requirements: If required by law, we may disclose information
to comply with a legal process.
4. Data Storage & Security
All data is stored on servers located in China (Alibaba Cloud).
All network communication is encrypted via HTTPS (TLS 1.3).
Passwords are hashed using bcrypt (cost factor 12).
Auth tokens expire after 30 days of inactivity.
Food photos are not stored on disk — they are held in memory during
processing and discarded immediately after AI recognition completes.
5. Data Retention & Deletion
Account data and food logs are retained until you request deletion.
You can delete individual food entries from within the App at any time.
To delete your entire account and all associated data, contact us at
the email below. We will process your request within 30 days.
6. Children's Privacy
This App is not intended for children under 13.
We do not knowingly collect information from children. If you believe a child
has provided us with personal data, please contact us immediately.
7. Your Rights
Depending on your location, you may have rights under GDPR (EU/EEA), CCPA (California),
or other local privacy laws. These rights include:
Access: Request a copy of your personal data.
Rectification: Correct inaccurate data (you can do this in-app).
Erasure: Request deletion of your data.
Portability: Request your data in a machine-readable format.
To exercise these rights, email us at the address below.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you
of material changes by posting the new policy in the App and updating the
"Last updated" date.